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Dear Mr. Kamdar and Mr. Beeken: 

The enclosed documents were reviewed under the Freedom of Information/Privacy Acts (FOIPA), Title 5, 
United States Code, Section 552/552a. Below you will find checked boxes under applicable statutes for the 
exemptions asserted to protect information exempt from disclosure. The appropriate exemptions are noted on the 
processed pages next to redacted information. In addition, a deleted page information sheet was inserted to indicate 
where pages were withheld entirely pursuant to applicable exemptions. An Explanation of Exemptions is enclosed to 
further explain justification for withheld information. 
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33 pages were reviewed and 32 pages are being released. 

Below you will also find additional informational paragraphs about your request. Where applicable, checked 
boxes are used to provide you with more information about the processing of your request. Please read each item 
carefully. 








Document(s) were located which originated with, or contained information concerning, other 
Government Agency (ies) [OGA], 

This information has been referred to the OGA(s) for review and direct response to you. 

We are consulting with another agency. The FBI will correspond with you regarding this information 
when the consultation is completed. 

In accordance with standard FBI practice and pursuant to FOIA exemption (b)(7)(E) and Privacy Act 
exemption (j)(2) [5 U.S.C. § 552/552a (b)(7)(E)/(j)(2)], this response neither confirms nor denies the 
existence of your subject's name on any watch lists. 

For your information, Congress excluded three discrete categories of law enforcement and national security 
records from the requirements of the Freedom of Information Act (FOIA). See 5 U.S. C. § 552(c) (2006 & Supp. IV 
(2010). This response is limited to those records subject to the requirements of the FOIA. This is a standard 
notification that is given to all our requesters and should not be taken as an indication that excluded records do, or do 
not, exist. Enclosed for your information is a copy of the Explanation of Exemptions. 

Please direct any further inquiries about this case to the Attorney representing the Government in this 
matter. Please use the FOIPA Request Number and/or Civil Action Number in all correspondence or inquiries 
concerning your request. 

W 

See additional information which follows. 


Sincerely, 

>7V 


David M. Hardy 
Section Chief 
Record/Information 
Dissemination Section 
Information Management Division 


Enclosure(s) 

The enclosed documents, Bates-numbered FBI 18-cv-02709-1 thru FBI 18-cv-02709-33, represent the FBI’s 
final release of information responsive to Item 1 of your Freedom of Information/Privacy Acts (FOIPA) requests and 
subsequent civil action case pending in the U.S. District Court for the District of Columbia. 

In response to Items 2 and 3 of your records requested, the FBI is a criminal law enforcement agency as 
well as an intelligence agency. The records located, processed and released to you pertain to the FBI’s criminal law 
enforcement mission and functions. In its capacity as an intelligence agency, the FBI compiles records while 
carrying out its responsibilities to investigate threats to national security and gather foreign intelligence. The nature of 
your request implicates records the FBI may or may not compile pursuant to these national security and foreign 
intelligence missions and functions. Accordingly, the FBI cannot confirm or deny the existence of any records about 
your subject as the mere acknowledgment of such records existence or nonexistence would in and of itself trigger 
harm to national security interests per Exemption (b)(1) and/or reveal intelligence sources and methods per 
Exemption (b)(3); 50 U.S.C. § 3024(i)(1). 

It is unnecessary to adjudicate your requests for a fee waiver as no responsive main files were located. This 
material is being provided to you at no charge. 



EXPLANATION OF EXEMPTIONS 


SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552 

(b)( 1) (A) specifically authorized under criteria established by an Executive order to be kept secret in the interest of national defense or foreign 

policy and (B) are in fact properly classified to such Executive order; 

(b)(2) related solely to the internal personnel rules and practices of an agency; 

(b)(3) specifically exempted from disclosure by statute (other than section 552b of this title), provided that such statute (A) requires that the matters 
be withheld from the public in such a manner as to leave no discretion on issue, or (B) establishes particular criteria for withholding or refers 
to particular types of matters to be withheld; 

(b)(4) trade secrets and commercial or financial information obtained from a person and privileged or confidential; 

(b)(5) inter-agency or intra-agency memorandums or letters which would not be available by law to a party other than an agency in litigation with 
the agency; 

(b)(6) personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy; 

(b)(7) records or information compiled for law enforcement purposes, but only to the extent that the production of such law enforcement records or 
information ( A ) could reasonably be expected to interfere with enforcement proceedings, ( B ) would deprive a person of a right to a fair 
trial or an impartial adjudication, ( C ) could reasonably be expected to constitute an unwarranted invasion of personal privacy, ( D ) could 
reasonably be expected to disclose the identity of confidential source, including a State, local, or foreign agency or authority or any private 
institution which furnished information on a confidential basis, and, in the case of record or information compiled by a criminal law 
enforcement authority in the course of a criminal investigation, or by an agency conducting a lawful national security intelligence 
investigation, information furnished by a confidential source, ( E ) would disclose techniques and procedures for law enforcement 
investigations or prosecutions, or would disclose guidelines for law enforcement investigations or prosecutions if such disclosure could 
reasonably be expected to risk circumvention of the law, or ( F ) could reasonably be expected to endanger the life or physical safety of any 
individual; 

(b)(8) contained in or related to examination, operating, or condition reports prepared by, on behalf of, or for the use of an agency responsible for 
the regulation or supervision of financial institutions; or 

(b)(9) geological and geophysical information and data, including maps, concerning wells. 

SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552a 

(d)(5) information compiled in reasonable anticipation of a civil action proceeding; 

(j) (2) material reporting investigative efforts pertaining to the enforcement of criminal law including efforts to prevent, control, or reduce crime 

or apprehend criminals; 

(k) (l) information which is currently and properly classified pursuant to an Executive order in the interest of the national defense or foreign policy, 

for example, information involving intelligence sources or methods; 

(k)(2) investigatory material compiled for law enforcement purposes, other than criminal, which did not result in loss of a right, benefit or privilege 
under Federal programs, or which would identify a source who furnished information pursuant to a promise that his/her identity would be 
held in confidence; 

(k)(3) material maintained in connection with providing protective services to the President of the United States or any other individual pursuant to 
the authority of Title 18, United Stales Code, Section 3056; 

(k)(4) required by statute to be maintained and used solely as statistical records; 

(k)(5) investigatory material compiled solely for the purpose of determining suitability, eligibility, or qualifications for Federal civilian 
employment or for access to classified information, the disclosure of which would reveal the identity of the person who furnished 
information pursuant to a promise that his/her identity would be held in confidence; 

(k)(6) testing or examination material used to determine individual qualifications for appointment or promotion in Federal Government service the 
release of which would compromise the testing or examination process; 

(k)(7) material used to determine potential for promotion in the armed services, the disclosure of which would reveal the identity of the person who 
furnished the material pursuant to a promise that his/her identity would be held in confidence. 
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Electronic Communication 


Title: (U//j3^S^) Duty To Warn Operational 
Guidance 


Date: 06/28/2016 


From : CO UNT E RT E RROftt'SM 


Contact: 


Approved By: 
Drafted By: 


ALL INFORMATION CONTAINED 

HEREIN IS UNCLASSI FIED _ 

DATE 03-07-2019 BV | | HSICC 


Case ID #: 


(u//j5«dj I 

DUTY TO WARN CONTROL FILE 


b7E -1 


b6 -1 
b7C -1 


b3 -1 
b7E -1, 3 


Synopsis: (U//jJ>fct££) To provide the field with guidance regarding CTD's 

DTW procedures. 

Enclosure(s) : Enclosed are the following items: 

1. (U/AF&U32 DTW Victim List 05-02-2016 

2. (U//|p«£f) DTW Victim List 06-21-2016 


Details: 





CTD is cognizant of the significant operational demands these 


DTW operations entail, and is striving to provide the most thorough 
victim information possible. 


To further clarify CTD expectations regarding DTW operations, the field 
is expected to complete the following tasks with respect to current 
and ensuing DTW operations: 

1. Provide suggested language for the Agents to utilize as a guide 
when conducting these in person contacts. CTD will assist in 
this process by including suggested language in the individual 
leads set for the Field. 

2. The Field will find and notify the exact person specified. If 

UNCLAS SI FI ED / 


FBI 18-CV-02709-1 







UNCLASSIFIED/ 


Title: 
Re: 


(U/ZFg&gJ'' Duty Operational Guidance 

' %!§* t &/2016 


that person has moved cut of the Division's AOR then that Field 
Office will cut a lead to the new Division where that person has 
relocated with a cc to FBIHQ. 

3. The exact, address on any of the lists will be visited and the 
occupant's of that address provided DTW. 

4. Names and addresses on the list will be provided by the Field 
Office to both the State and Local LE- authorities with local 
jurisdiction over that address. 

5. Names and addresses which are located in a specific state will 
also be provided by the responsible Field Office to the State 
Intelligence Fusion Centers covering that respective AOR. 

. r - -S _ 

Please direct questionsS^jggarding these procedures to I I 

_ ^^l and/or CTD Executive Management. 


♦ ♦ 
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CC:|f|^D OFFICES (Route) 
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bb -1 

b7C -1 
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From: 



TERTERRORISM 


Contact: 


Approved By: 


SC SANBORN JILL 
SC MCPHERSON MICHAEL F 
DAD MENDENHALL BRADLEY G 
A/AD MENDENHALL BRADLEY G 
EAD Michael B. Steinbach 

Drafted By: | | 


Case ID #: 


(U/ZE©«a£ Duty to Warn 
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b6 -1 
b7C -1 


b3 -1 
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Synopsis: (U//CE©y«3 This Electronic Communication sets forth guidance 

for how the Counterterrorism Division (CTD) should implement its Duty 
to Warn responsibilities, consistent with Intelligence Community 
Directive 191. 


Details: 

Intelligence Community Directive (ICD) 191 sets forth a consistent, 
coordinated approach for how the Intelligence Community (IC) will 
provide warning regarding threats to specific individuals or groups of 
intentional killing, serious bodily injury, and kidnapping. This 
includes threats where the target is an institution, place of business, 
structure, or location. As discussed below, the Duty to Warn procedures 
address, among other things, such matters as designating separate 
senior officers who shall be responsible for making the” rmination 
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Title: (U/Z£@9Z£) Counterterrorism Division Duty to Warn 
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b3 -1 
b7E -3 


and for determining whether to waive that duty; setting forth 
appropriate justifications for waiver; and coordinating with other IC 
elements or U.S. government agencies, as appropriate. 


(U//J3S®2) CTD manages the Duty to Warn process, which includes 
evaluating the credibility and specificity of the threat, normalizing 
the released information, disseminating victim information and 
notification guidance to the field, and memorializing Duty to Warn 
notifications. 


* (D//j3^yQX Evaluation of Duty to Warn Obligations 
(tt) Per ICD 191, the duty to warn is mandatory, with limited 
exceptions, if the designated senior officer of the relevant IC element 
— here, the FBI — determines the information collected or acquired 
indicating an impending threat of intentional killing, serious bodily 
injury, or kidnapping directed at a person or group of people is 
credible and specific. If a duty to warn is found, a separate 
designated senior officer of the FBI may determine if the duty may be 
waived after the credibility determination has been made. 


(U) Specifically, "[the FBI] shall designate senior officers 
responsible for reviewing threat information initially determined to 
meet duty to warn requirements to affirm whether the information is 
credible and specific, so as to permit a meaningful warning. [The FBI] 
shall also designate senior officers responsible for making waiver 
determinations based on criteria identified in this Directive. The 
senior officers designated for affirming that duty to warn information 
is sufficient for a meaningful warning and fo^patejlng waiver 
determinations should not be the same individt||§||j$l See, ICD 191, 
Section F.2. 


(U) CTD has established that the Deputy Assistant Director (DAD) 


] of CTD, in consuLLtaj:ion with the Special 

UNCLASSIFIED// 
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Agent in Charge (SAC) of the impacted area of responsibility (AOR), 
shall make the Duty to Warn determination. The Assistant Director (AD) 
of CTD shall make any waiver determinations. The determination duties 
of the DAD, AD, and SAC may be handled by a senior officer acting in 
each of their respective positions. 


(U/ZJ3&8CCI The FBI's Duty to Warn procedures establish a non-inclusive 
list of justifications for waiver: 

a. The intended victim, or those responsible for ensuring the intended 
victim's safety, is already aware of the specific 

b. The intended victim is at risk only as a result )C^V..fehe intended 
victim's participation in an insurgency, insurrection, or other armed 
conflict; 

c. There is a reasonable basis for believing that the iim^^ied victim 
is a terrorist, a direct supporter of terrorists, an ag$^f|in, a drug 


trafficker, 

or im^I&Etei in crimes; 


d- 



□ 




e. 

J_ 






or 


b7E -2 


b3 -1 
b7E -2 


f. There is no reasonable w a»J g^ifj&n the intended victim. 


(U//JI&W3J The AD may rely on any of the above, or similar, 
considerations in justifying a waiver determination. Issues concerning 
whether threat information meets the Duty to Warn threshold should be 
resolved in favor of informing the intended victim if none of the 
justifications determined to be acceptable are present. Should the FBI 
decide to waive the duty to warn, this must be documented. 


UNCLASSIFIED//^0^Q 
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• (U/^i©9di Duty to Warn Notification Procedures 

(U/7j©Q^) Notifications may be conducted in several forms. Under the 
DIOG 14.7.3.1.1.2., the FBI "must determine the means and manner of the 
warning, using the method most likely to provide direct notice to the 
intended victim." The DIOG also states that notification to warn the 
intended victim of the nature and extent of the threat must be 
expeditious. 


(U/^J©@CjJ Depending on the circumstances, the FBI may implement its 
Duty to Warn process by issuing letters to the last .known address of 
the targeted individuals containing a FBI/HQ nuftiber tp call with any 
questions or concerns, and providing a website for guidance in 
awareness and safety precautions, assuming no efoeygency or-lirnminent 
threat exists requiring more immediate notice. See, DIOG^14.7.3.1.1. 
Letters may be written or tailored to specific threats. 


• (U/7j©aQ^ Leveraging Local and State Partners 

(U//JS*5r3€U The FBI does not need to serve as the sole agency providing 
Duty to Warn notifications. It may, instead, coordinate notifications 
with local and state partners, including the local and state fusion 
centers. As per DIOG 14.7.3.1.1.2, and as permitted by ICD 191, the FBI 
"may seek the assistance of another law enforcement agency to provide 
the warning[s]." The FBI field office can pass the information to state 
and local fusion centers and leverage local law enforcement partners to 
conduct in-person notifications, within legal and policy guidelines. 



(U//j2StfQj Under DIOG 14.7.3.1.1.2., "[t]he FBI...must 
means and manner of the warning, using the method most 
provide direct notice to the intended victim. In some cSiir&Sj 
require the assistance of a third party." Similarly, under DIOG 
14.7.3.2.1.1., "when an employee has information that a person ... is 
subject to a credible threat to his/her life or of serious bodily 


may 


UNCLASSIFIED/ 
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injury, the employee must attempt expeditiously to notify other law 
enforcement agencies that have investigative jurisdiction concerning 
the threat." Pursuant to ICD, and as discussed above, the "employee" 
authorized to make these decisions is a senior officer. Specifically, 
the DAD of | | in consultation with the SAC of the impacted AOR, 

shall make the Duty to Warn determination. The AD of CTD shall make any 
waiver determinations 


• (U) Documentation of Duty to Warn determination and notification 
(U) The Duty to Warn determination and any subsequent notification must 
be documented. Specifically, "[u]pon determination by [the FBI] that a 
duty to warn exists and will not be waived, [the FBI] shall generate 
statements documenting the threat information and the basis for the 
duty to warn determination and include an unclassified tear line, where 
possible, for use in delivering the threat information to the intended 

'kfee^im." 


(U//i£**3X In keeping with ICD 191, Section F.13., the FBI shall 
document and maintain records on the following duty to warn actions: 

a. The method, means, and substance of any warning given by the FBI; 

b. Senior officer reviews of threat information and determinations; 

c. Justifications not to warn an intended victim based on waiver 
criteria identified in this Directive; 

d. Coordination with the CIA, if the intended victim is Ideated outside 
the U.S. and its territories, consistent with Section F.lCf, to 
determine how best to pass threat information to the intended victim; 

e. Decisions to inform the intended victim in light of exigent 
circumstances that preclude prior consultation; 

f. Communication dffyi^preat information to another IC element or U.S. 
Government agency ,Jf&fe/;delivery to the intended victim; and 

g. Notification to the opi-ginating IC element of how and when threat 
information was delivered to the intended victim. 


UNCLASSIFIED//J®u^ 
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Counterterrorism Division 


Washington, DC 

November 14,2018 


CTD Duty to Warn Standard Operating Procedures 


(U) Purpose . 

(U//j5>yd| The purpose of this docum ent is to articula te CTD’s standard operating procedures 
for Duty-tO-Wam (DTW) notifications. I I substantive units are responsible for 

ensuring field offices notify threatened persons. 

(U) Background . 


(SI 


(W The Intelligence Community Directive (ICD) 191 and the FBI Domestic Investiga tions 

Operations Guide (DIOG) 14,7,1 stipulate the FBI’s duty to warn (DTW) responsibilities 1 .! _I 

(S) 


|(S) 

bl 

b3 

b7E 


‘(U/2E©W3lTheFB[ has a responsibility to notify persons of tlueats to their life orthrealst ha may result in serious bodily injury audio notify 
other law enforcement agencies of such threats (Extracted from DOJ Office of Investigative Policies. Resolution 20. dated 12/16/96). Depending 
on the exigency oftlie situation an employee, through his or hersupenisor. must notify die appropriate operational divisional FBIllQof tlie 
existence oftlie threat and t lie plan for notification. That plan may be followed unless ach ised t o thecontraiy by FBIHQ. 



b6 -1 
b7C -1 


b7E -1 


b7E -1 


bl -1 
b3 -1 


bl -1 
b3 -1 
b7E -2 


-1 

-1 

-2, 3 
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A. (U//E&^C£j Source of Threat Information . 


The source of the threat information has a significant impact on both the 
approval authorities for the tear-line language used to verbally notify potential victims as 
well as the appropriate handling and notification procedures. 




j'bl ;-l 
jb*i .^l • 
•Htfsr. si, 


B. (U//F0^QX| 


[Threat Notifications 


b7E -2 


bl -1 
b3 -1 
b7E -1, 2 


b7E -2 


CTD Duty to Warn Standard Operating Procedure. 1 ,' 
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2. (U//BQ^t£) Triage of threat information, f 


(S) 

bl -1 
b3 -1 
b7E -1, 2 


b7E -1, 2 


_|will assess the infcmuriion r collected 

and determine whether it is terrorist-related and if it reasonably appears to meet the 
definition for DTW as defined in ICD 191 "credible and specific.” 3 

(U/7E©%£CQ The following considerations are recommended in making credible and 
specific determinations: 

Credible 

• I I b7E -2 


’All IC element (hat collector acquires credible and specific infonnalion indicating an impending t lire;l of intentional killing, serious 
bodily injury , or kidnapping directed at a peisonor groupof people (i.e. victims) shall have a duty to warn the intended victim(s) ortliose 
responsible for protecting the intended victim(s), as appropriate This includes throats where tlic target is an institution, place ofbusiness, 
structure, or location. The tenn intended victin includes both USPERs. as defined in EO 12333, Sect ion 3.5(k). and non-USPERs. 


CTD Duty to Warn Standard Operating Procedures 
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b7E -2 


Sp ecific 


C. (U/?EQ^QJ Appropriate Vetting Procedures 


bl -1 
b3 -1 

-b7E -1, 2, 4 


(S) 


3. (UtoeOj If[ 


[ deter mines the threat informaft^ 1 ',^oes meet the “credible a nd 
specific” criteria u nder ICD 191 | \ 


will document the result of the analysis and provide results to 

will document the results of the 


analysis and provide a re commend ation whether or not to conduct DTW to the Deputy 
Assistant Director (DAP |~ or delegated official If the DAd Idetermines th e 


b7E -1, 2 


FBI will conduct DTW notifications. 



D. (U/TBEHjC CfNotification Procedures to th e hieid ■;. 


b7E -1, 2 


1 _ r 

Field Office (FO) associated .with Jhreafenfto: address|_ 


Iwill determine th e 


_ _ Any identified frijSSary:ipfcc^onn ^-.afaAlw addresses will be flagged, and any 

duplicate identifiers will be corrso^datect a;w one Eik item. 


b7E -1, 2 




CTD Duty tO'<j$^®ft3^4apd Operating Procedures 
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(u//Pp%a5[ 

and provide 
and provid e DT #;! 
requested. 



| will document the details of the incident via EC 
StQ the affected. field offices to locate the threatened individuals 

| will provide support as 


3. ( U/ZE&OT 



4. 




individuals are identified as having a military nexus. 

■ Military nexus is defined as the intended victim having (l)DOD- 

affiliated email address ( mil); (2) military installation, APO, or FPO residential 

address : or (3) military rank in front of their name. _ 

(U//E&UC3 


b7E -1, 


b7E -1, 2 


if any 


b7E -1, 2 


E. (U//FffcUQT Notification Procedures - Field to Victim 

I. (U//B3^gCT) The Field Office (FO) must acknowledue receipt of any DTW lead-taskinu 


2 . 


3. (U/^&yO} The FO will not^y.- ^^^-ts of addresses even if the intended victim no 
longer lives at the residence, if .fe.iatcslded victim has moved, the FO will transfer the 
lead-tasking to the relevant 

4. (U/7E©^OX Upon completion-the FO will appropriately document and close¬ 
out the lead-tasking. 

F. (U//EOUQJ Notification Recommendations 


b7E -2 


b7E -2 


1. (U//EQ4103 Verbal Recommendations to victims during the notification: 

a. (U//E©UQX If you notice anything suspicious that makes you feel threatened, call 9- 
1-1 or your local emergency services immediately. Make a secondary notification to 
local law enforcement. 

b. (U//F^fcfQj If you notice anting,.siispicious that is not immediately threatening, 
notify FBI as soon as 


CTD Duty to IVarn Standard Operating Prozstigpsihr V .- 

se€S 
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c. 


b7E -2 


(U/TEQ^gf 


2 . 


(U/7F@4sl£TJ Examples of threatening or suspicious activity includes: 

• (U/ZEO&Qf 


(U//E©«3j 

(U//FgyQj 

(U/7E&&gj 



G. (U//EgyCQ Central Trackinu of Notifications . [ 


]will create and maintain a 


centralized record of all intended and collateral USPER intended victims. 


H. (U//E&yCQ Reportinu Updates 


(U/?B©«3j[ 


]will coordinate with the appropriate FO and provide 


regular lead updates to CTD executive management on the status ofDTW notificati ons and 
bring attention to any field level issue s 1 ~| The 

designated program mana>p*iK3t unit | ’ | will be responsible for 

tracking all process progi^^ f |-6m receipt of information f&jsfcgfi memorialization. 


I. Glossary 



CTD - Counterterrorism Division 



D1 W - Duty to Warn 

FO - Field Office 


1CD - Intellmence Community Directive 




PH — Personally Identifiable Informat ion 


IFO - Task Force Officer 



b7E -2 


b7E -1 


b7E -1, 2 
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Appendix A 


Current DTW Language 

(U//E&yCF) Public Releases: Idem Hies obtained from Public Releases of PH | _ b7E -2 


(U/7myCfi Intelligence Reporting Operations: Names not publicly released. V 




(U/$&yCf) Definitions per ICD 191 

• Duty to Warn means a requirement to warn USPERs and non-USPERs of impending threats 
of intentional killing, serious bodily injury, or kidnapping. 

• Intentional Killing means the deliberate killing of a specific individual or group of 
individuals. 

• Serious Bodily Injury means an injury that creates a substantial risk of death or which causes 
serious, permanent disfigurement or impairment. 

• Kidnapping means the intentional taking of an individual or group through force or fbreat of 
force. 


CTD Duty to Warn Standard Operating Procedures 


Page 7 
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b7E - 


|If aAfxjjo 

immed iately * if 

availab le bidceaDusdS t 


is likely to ffj| 
bombing within fj| 
I '>gng the approg*| 


.1 V<. - . J 


Mh. publicity, and it is not 
£$$$ occurred, furnish CTD with 


communication. 


10.4.7.1. 


(U/TE&UQp.l 
explosive k\f- 
18 U.S.C. g& 
forth their rest 


w tfe V&lfaM the |ATF have jurisdiction to investigate violations of federal 
f iisrKtoA.TF' feave concurrent statutory authority to investigate violations 
in 1? U.S.C, 3 840. and have neaptiaied an MQU siting 


| Furthennore, in 

investigations where the FBI traditionally has exercised jurisdiction (e.g., bank robberies, civil 
rights violations, and organized crime), the FBI will control the investigatio^ffif^fer to the 
relevant FBI-AIT MQU) . Advise CTD if the ATF attempts to exercise jurii^#n in a matter 
being investigated by the FBI or if any other problem is encountered with AIT.The deputy 
Attorney General will resolve all issues relating to jurisdiction over explosives investigations. 

(U//j3^0) The ATF has primary jurisdiction for investigations involving the unlawful 
manufacture, possession, or transfer of a destructive device (26 U.S.C. § 5861(d)-(J)), and the 
unlawful importation, manufacture, distribution, or storage offx^fesives (18 U.S.C. §§ 841- 
84.3). While case agents need to be alert for such violations, the Ffcl will not transfer 
responsibility for an otherwise substantive FBI investigation to thfe ATF because of the mere 
presence of one of these violations. 


10.4.7.2. (U) Bomb Threats 


_An evaluation of any suspicious item needs to be 

made by an FBI bomb technician, bomb squad personnel or a military explosive ordnance 
disposal (EOD) unit. Render sate responsibilities for located bomb devices rest with the bomb 
squad personnel or military EOD unit. Each FO must have a bomb threat plan. See DIOG 
Section 14 for the threat to life policy. 


(U/TFO-UdJ Immediately notify CTD by telephone, followed by a detailed EC, in the following 
instances: 


s r/SjoreKSI 
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• If the identity of the subject is known, alleged, or readily available. 


• (U//^fe^^^threat appears to be part of a pattern or plan by a particular subject or 

the impacted federal, state, local, or foreign partners, in accordance 
DIO .Inland su bsection 4,2. of this PG. FOs will also advise the US AO 

telephonicaiy* 4w4»'<1hbdents or threats reported to CTD that are within FBI jurisdiction. Unless 
circumstances dictate otherwise, such notification will be made during business hours. 


(U//E&I>t£) Bombings, attempted bombings, and bomb threats constituting other substantive 
violations within FBI jurisdiction, such as the federal train wreck statute, destruction of aircraft 
or motor vehicles, civil rights, and extortion, will be handled in accordance with the rules for the 
particular violation involved and DIOG subsection 14.7. CTD and/or the Criminal Investigative 
Division (C ID) must be advised of the incident under the appropriate substantive caption. 


(U/D5&UCQ Note: Situations involving bombings or attempted bombings of government 
property and sabotage by use of explosive are handled as 174 matters. 

(U/ZKH3C0 Any false reports or actual instances of a bomb aboard an aircraft unrelated to an 
aircraft hijacking incident will be investigated using the 149 - Destruction of Aircraft or Motor 
Vehicles (DAMV) classification. Any bomb threats involving an aircraft hijacking incident will 
be investigated using the 164-Crime Aboard Aircraft (CAA) cJassjfication. These requirements 
will assist in maintaining uniformity in the Time Utilization afM^iordkeeping (TURK) records 
and clarity as to which FBIHQ program manages the investiga^lt^or more information 
regarding the 149 and 164 classifications, refer to the Transportation Crimes Policy Guide 
( 043 5 PG ). 

(U//£j£HS££) All written bomb threats are to be submitted to the l^ab for document examination 
and for latent fingerprint examination, whether or not an active investigation is being conducted 
by the FBI 


10,4.7.3. (U) Bomb Disposal 

(U//Fl>UC[} FOs must maintain liaison with military EOD units and/or local law enforcement 
bomb squads so that assistance can be promptly obtained if bombs or live explosbpyp:e 
encountered in connection with official investigations. The U.S. Army has EOD jl|||g||tationed 
throughout the United States, including .Alaska and Hawaii. These units, which hfglilfsisted the 
FBI in the past, have personnel qualified to disarm bombs and handle and dispose of live 
explosives. 

(U//FOt5?Jf In emergency conditions, requests for assistance from Army EOD units are usually 
oral. All such oral requests are to be confirmed in writing by a letter addressed to the 
commanding officer of the EOD unit involved. Because the Army has no EOD unit in Puerto 
Rico, the San Juan Field Office must maintain liaison with the appropriate U.S. Navy facility for 
any necessary- assistance. 

(U//f3>UC£j Bombs are to be rendered sate by qualified bomb disposal personnel. Render sate is 
the responsibility of public safety bomb squads and military EOD units. FBI bomb technicians 
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4. (li) General Provisions for Counterterrorism Investigations 

National Management of Counterterrorism Investigations 

Counterterrorism investigations involving both DT and IT are nationally managed 
the national program manager, the AD of CTD may provide direction for all matters 
Program, to include operational matters. Disagreements between FOs, legal 
attaches (Legat), and/or FBIHQ will be worked out at die lowest appropriate level. As necessary, 
the AD of CTD may resolve the matter between FOs and/or FBIHQ by making a final decision, 
consulting as appropriate, with other FBIHQ programs. All unresolved disagreements with 
Legats and CTD shall be resolved by the IOD AD and CTD AD. During the course of each stage 
of an invesggggiip. it is essential for FOs to coordinate with die appropriate CTD operational 
analytical |f|p|js dissemination, and operational support units. 

(U/7E^Qj trail IT or DT investigative opening or closing is denied by FBIHQ, the AD of 
CTD, the FO SAC, and the OGC deputy' general counsel (DGC) must confer. The AD of CTD 
will be the final arbitrator and will make all appropriate notifications. If an IT investigative 
opening is denied by FBIHQ for lack of predication, CTD is required to notify the deputy 
Attorney General and document the notification to the investigative file, informing any affected 
FO and CTD elements of the denial. 

4.2, (U) Addressing Counterterrorism Threats 

(U//Et>lsC£[ The mission of the CTD is to defeat terrorism. Accomplishing this task requires the 
continuous monitoring and analysis of intelligence to promptly detect and act on threats, as well 
assharing the information as broadly as possible with the FBI’s federal state, local, and foreign 
government partners, consistent with the protection of sensitive national security information, 
applicable federal law, memoranda of understanding (MOU), and/or FBI policies 

(U/7E©fcltQ As such, within 24 hour s of the receipt of information about an immediate threat to 
life, property, or national security, FOs and CTD program management units must take 
appropriate investigative action with tire information to determine the veracity and type of threat, 
including, as available: 


« 


« 
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fG/TFftKfTj Additionally. FOs and CTD program management units must promptly notify I I 

_ affected Legat offices, and, as appropriate, other law enforcement 

ners having jurisdiction over, or investigative interest in, the 
e FBI must be conducted in accordance with DIOG Section 14 


and/or intelligence serv|p. 
matter. Notifications o '* ii " 


regarding notifications 



threats to life. FOs and CTD program managers must 


coordinate their activities to ensure proper notification is provided. 


(U//E3^t2) Also, FOs, through Weapons of Mass Desttfiggp; coordinators (WMDC), must 
diligently address any threat or potential threat posed bf?i$f$ential weapon of mass destruction 
(WMD). Situational reports and threat evaluations must ^coordinated and distributed by the 
WMD Directorate (WMDD) via established protocols with the FBI Laboratory, Critical Incident 
Respon se Group (CIRG), and FO WMDC WMDD must submit all information to CTP j | 

| FOs must submit investigative reports to both CTD and the WMDD embeds within CTD, 
as appropriate. 

4.2.1. (ll) | 

4.2.1.1. (U)[ 

(U//D>gCfi 


4-2.1.2. (U)[ 

(uz/Esyoll 
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(U) Counterterrorism Program Baseline Collection Plan _ 

t & < 

(U) Intelligence Collection and Reporting Stratei 

In an effort to standardize information and intelligei 
investigative guidance for both DT and IT investigations, CTD 
framework collectively .^s^gd to as “baseline collection.” The 1 
to guide investigators irf^f^iing intelligence and using irrve 
of each DT or IT investfjpmln. Baseline collection is not manfl 
listing, but rather a best practice list of items that may beaccoi 
relevant, and consistent with the DIOG during an assessment o 



Is provide 
dfcSIigative 
reflection is 
he course 
lusive 
mnissible. 


(U/^^y£Q Baseline collection was established to provide programmatic standards in terms of 
the quality and thoroughness of assessments and predicated investigations. Baseline collection 
can help prevent gaps in investigative efforts. FOs are reminded that all investigative efforts are 
subject to the AGG-Dom and the DIOG. The least intrusive means of investigation/collection 
must be utilized under the AGG-Dom or DIOG (refer to the section on least intrusive methods in 
the DIOG) . Baseline collection is intended to serve as a guide through the various investigative 
stages. Common sense will be applied when determining whether a particular item contained in 
the baseline collection pertains to a specific assessment or investigation. If there is doubt as to 
$$pher the appropriate authority exists in an individual investigation to address a baseline 
'^sl&ction item, employees are to consult the chief division counsel (CDC), OGC, and/or the 
OTD program manager. 


(LV7F£^dtT} Supervisors may address baseline collection with case agents during investigative 
file reviews, and such reviews will inform many of the intelligence and collection matters 
required for review, in accordance with DIOG subsection 3.4 4.6. In addition to standardizing 
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(U) 'Die Attorney General has also issued revised <for the Disclosure and (!se of 
(>nim.hiry Information under R/ik 6fe)(3i(})) . On May 15, 2008, the Deputy Attorney General 
issued a memorandum which provides amplifying guidance as to lawful use and disclosure of 
6(e) information See also DIOG subsections 18.6.5.11 and 12. 

14.7 (U) Threat To Life - Dissemination Of Information 

14.7.1 (U) Overview 

(U//FOUOrrhe FBI has a responsibility to notify persons of threats to their life or threats that 
may result in serious bodily injury and to notify other law enforcement agencies of such threats 
(Extracted from !)()./ Office of' hives! igaiiw Policies, Resolution 20. dah’d 12 16 94 ). Depending 
on the exigency of the situation, an employee, through his or her supervisor, must notify the 
appropriate operational division at FB1HQ of the existence of the threat and the plan for 
notification. That plan may be followed unless advised to the contrary by FB1HQ. 

14.7.2 (U/ /FOUO) In forma tion Received through FISA Surveillance 

(U//FOUO) If information is received through a FISA-authorized investigative technique 
indicating a threat to life or serious bodily harm within the scope of Section 14.7, the field office 
case agent responsible for that FISA must immediately coordinate the matter with the FB1HQ 
SSA responsible for that investigation and an NSLB attorney from the applicable 
counterintelligence or counterterrorism law unit. These individuals must consult the applicable 
FISA minimization procedures, consider the operational posture of the investigation, and 
collectively determine the appropriate manner in w'hich to proceed. FBI executive management 
may be consulted, as appropriate (e.g., if DIDO or declassification authority is needed). The field 
office case agent must document the dissemination. If the decision is made not to disseminate the 


14-8 

UNCLASSIFIED FOR QiTICIAL USE ONLY 


FBI 18-CV-02709-25 




UNCLASSIFIED FOR OFF I CIAL USE ONLY 
Domestic Investigations and Operations Guide §14 


threat information, that decision must be approved by an ASAC or higher and the reasons must 
be documented in the applicable investigative file. 


14 . 7.3 (U) Dissemina tion of Inform a tion Concerning Threa ts a gainst 
Intended Victims (Persons) 

14.7.3.1 (II)'W ARKWGTO THEINTE.NJH5B VICTIM (PERSON) 

: vl‘ l $v-'*v?i 

14.7.3.1 1 {UiExi'EBmom Warnings to Identifiable Intended Victims 

(U7FOEK4) Except as provided below in Sections 14 7,3.1.LI (Exceptions) and 14.7.3 1.2 
(Custody or Froteetee), when an. employee lias information that a person who is identified or 
can be identified through .reasonable means (hereafter a 'intended victim”) is subject to a 
credible threat to Ida ‘her life or of serious bodily injury, the FBI employee must attempt 
expeditiously to warn tire intended victim of the nature and extent of the threat, 

14 . 7 . 3 . 1 . 1.1 (U) Exceptions to Warning 

^ -T— 

(U//FOUCI) An employee is not required to warn an intended victim if; 

A) (U//E OUOj * 

I I - 


B) (IJ/TOUOt the intended victim knows the nature and extent of the specific threat gainst 
him/her. 

14 . 7 . 3 . 1 . 1.2 (U) Means, Manner, and Documentation op 

W arning/Notification or Decision Not to Warn' 

(U//FOUO) The FBI employee, in consultation with his or her supervisor, must determine the 
means and manner of the warning, using the method most likely to provide dtreci notice to the 
intended victim. In some cases, this may require the assistance of a third party. The employee 
must document on an ED-999 the content of the warning, as well as when, where and by 
whom it was delivered to the intended victim. The FD-999 must be placed in a zero file or if 
investigative methods are used, the appropriate investigative file. 


(U/TFOLCW The employee, in consultation with his or her supervisor, may seek the assistance 
of another law enforcement agency to provide the warning. If this is done, the employee must 
document on an FD-999 that notice was provided by that law enforcement agency, as well as 
when, where and by whom (i.e., the name of the other agency's representative) it was 
delivered. The employee must also document the other agency's agreement to provide a 
timely warning. The FD-999 must be filed as specified above. 


(U//FOUO) Whenever time and circumstances permit, an employee's decision not to provide 
a warning in these circumstances must be approved by an ASAC or higher. In all cases, the 
reasons for not providing a warning must be documented by EC in a zero file or if 
investigative methods are used, the appropriate investigative file. 


'• iL.vreW-f 
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14.7.3.1.2 (V) Warnings When Intended Victim is in Custody or is a 

Protectee 

(U/ /FOUO) When an employee has information that a person described below is an intended 
victim, the employee, in consultation w'ith his or her supervisor, must expeditiously notify the 
law enforcement agency that has protective or custodial jurisdiction of the threatened person. 

(U// FOUO) This section applies when the intended victim is: 

A) (U//FOUO) a public official who, because of his/her official position, is provided a protective 
detail; 

B ) (U//FOH0jj 


C) (U//TOUO) detained or incarcerated. 

(U//F0H0) This paragraph does not apply to employees serving on the security detail of the 
FBI Director or any other FBI protected persons when the threat is to the individual they 
protect. 

14.7.3.1.2.1 (U) Means, Manner, and Documentation of 

W ARNING/N OTIFI.CATION 

(LV/FOUO) The employee, in consultation with his or her supervisor, may determine the 
means and manner of the notification. When providing notification, the employee shall 
provide as much information as possible regarding the threat and the credibility of the 
threat. The employee must document on an FD-999 what he or she informed the other 
law' enforcement agency, and when, where, how (e.g., telephone call, email) and to whom 
the notice was delivered. The F P-999 must be placed in a zero file or if investigative 
methods are used, the appropriate investigative file. 

14.7.3.2 (U) Notification to Law Enforcement Agencies That Have 

Investigative Jurisdiction 

14.7.3.2.1 (U) Expeditious Notification 

14.7.3.2.1.1 (U) Threats to Intended Persons 

(U//FOUO) Except as provided in Sections 14.7.3.2.2, when an employee has 
information that a person (other than a person described above in Section 14.7.3.1.2) who 
is identified or can be identified through reasonable means is subject to a credible threat 
to his/her life or of serious bodily injury, the employee must attempt expeditiously to 
notify other law enforcement agencies that have investigative jurisdiction concerning the 
threat. 

14.7.3.2.J.2 (U) Threats to Occupied Structures or Conveyances 

(U/7FOUO) When an employee has information that a structure or conveyance w'hich can 
be identified through reasonable means is the subject of a credible threat which could 
cause a loss of life or serious bodily injury to its occupants, the employee, in consultation 
with his or her supervisor, must provide expeditious notification to other law' enforcement 
agencies that have jurisdiction concerning the threat. 
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14.7.3.2.2 (U) Exceptions to Notification 

(U//F OU O) An employee need not attempt to notify another law enforcement agency that has 
investigative jurisdiction concerning a threat: 

A)(U/7FOE6}| 


B) (U/ /FOUO) when the other law enforcement agency knows the nature and extent of the 
specific threat to the intended victim 

(U//F QLIQ - ) Whenever time and circumstances pennit, an employee's decision not to provide 
notification to another law enforcement agency in the foregoing circumstances must be 
approved by an ASAC or higher. In all cases, the reasons for an employee's decision not to 
provide notification must be documented in writing in a zero file or if investigative methods 
are used, the appropriate investigative file. 

14 7.3.2.3 Means, Manner , and Documentation of Notification 

(U/ /FOUO)- The employee may detennine the means and manner of the notification The 
employee must document in writing in the applicable investigative file the content of the 
notification, and when, where, and to whom it was delivered. 

14.7.4 (U/ / F QUO) Dissemina tion of In form a tion Concerning Threa ts, 
Possible Violence or Demons fra lions Against Foreign 
Establishments or Officials in the United Sta tes 

(U//FOUO) If information is received indicating a threat to life within the scope of Section 14.7, 
or possible violence or demonstrations against foreign establishments or officials in the United 
States, the field office case agent must immediately coordinate the matter with the FBIFiQ SSA 
responsible for the case, who must notify the Department of State (DOS), United States Secret 
Service (USSS), and any other Government agencies that may have an interest. See Section IV 
of the 1973 MOU between the FBI and USSS , for the FBI’s information sharing responsibilities 
with the USSS in such cases. 

14 . 7.5 (U) Dissemina tion of In forma tion Concerning Threa ts A ga inst 
the President and O ther Designa ted Officials 

(U//FOU0) The United States Secret Sendee (USSS) has statutory authority to protect or to 
engage in certain activities to protect the President and certain other persons as specified in 18 
U S C. § 3056. An MOU between the FBI and USSS specifies the FBI information that the 
USSS wants to receive in connection with its protective responsibilities. 

(U// F9UQ4 Detailed guidelines regarding threats against the President of the United States and 
other USSS protectees can be fou nd in "Presidential and Presidential Staff Assassinat ion. 
Kidnapping and Assault.” (See the ] | 
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(U) The Attorney General has also issued revised Guidelines for the Disclosure and Use of 
Grand jury Information under Rule 6«'c)(3)i'D) . On May 15, 2008. the Deputy Attorney General 
issued a memorandum which provides amplifying guidance as to lawful use and disclosure of 
6(e) information. See also AGG-Dom. Part V.A.8 and DIOG subsections 18.6.5.11 and 12. 

14.7 (U) Threat To Life - Dissemination Of Information 

14.7.1 (V) Overview 

(U/7FOUO) The FBI has a responsibility to notify persons of threats to their life or threats that 
may result in serious bodily injury and to notify other law enforcement agencies of such threats 
{Extracted from DPI Office of Investigative Policies. Resolution 20. dated 12/16/96) . Depending 
on the exigency of the situation, an employee, through his or her supervisor, must notify the 
appropriate operational division at FB111Q of the existence of the threat and the plan for 
notification. That plan may be followed unless advised to the contrary by FBIHQ. 

14.7.2 (U//F&&0) Information Received through FISA Surveillance 

(U// FOUQ * if information is received through a FISA-authorized investigative technique 
indicating a threat to life or serious bodily harm within the scope of Section 14.7, the field office 
case agent responsible for that FISA must immediately coordinate the matter with the FBIHQ 
SSA responsible for that investigation and an NSLB attorney from the applicable 
counterintelligence or counterterrorism law unit. These individuals must consult the applicable 
FISA minimization procedures, consider the operational posture of the investigation, and 
collectively determine the appropriate manner in which to proceed. FBI executive management 
may be consulted, as appropriate (e.g., if DIDO or declassification authority is needed). The field 
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office case agent must document the dissemination. If die decision is made not to disseminate the 
threat information, that decision must be approved by an ASAC or higher and the reasons must 
be documented in the applicable investigative file. 

14.7.3 ( U) Dissemina tion of Information Concerning Threats against 
Intended Victims (Persons) 


14.7.3.1 (U) Warning to the Intended Victim (Person) 

14.7.3. 1 . 1 (U) Expeditious Warnings to Identifiable Intended Victims 

(U// FOUQ ) Except as provided below in. Sections 14.7.34.1.1 (Exceptions) and 14.7.3.1.2 
(Custody or Protectee), when an employee has information that a person who is identified or 
can be identified through reasonable means (hereafter a. “intended victim”) is subject to a 
credible threat to his/her life or of serious bodily injury, the FBI employee must attempt 
expeditiously to warn the intended victim of the nature and extent of the threat. 

14 . 73 . 1 . 1.1 (U) Exceptions to Warning 

(U/'/FOUQ) An employee is not require^Sswsfarn an intended victim if: 

A) (U//reWQ)| 85^ I b7E ~ 2 


B) (U/i TOU Q) the intended victim knows the nature and extent of the specific threat against 
him/her. 

14.7.3.1.1.2 (U) Means, Manner, and Documentation of 

Warning/Notieication or Decision No r to Warn 


(U//FOUQ) Tire FBI employee, in consultation with his or her supervisor, must determine the 
means and manner of the warning, using die method most likely to provide direct notice to the 
intended victim. In some cases, this may require the assistance of a third party. The employee 
must document on an FD-999 the content of the warning, as well as when, where and by 
whom it was delivered to the intended victim. The FD-999 must be placed in a zero file or if 
investigative methods are used, the appropriate investigative file. 

(LV/royO) The employee, in consultation with his or her supervisor, may seek the assistance 
of another law enforcement agency to provide the warning. If this is done, the employee must 
document on an FD-999 that notice was provided by that law enforcement agency, as well as 
when, where and by whom (i.e., the name of the other agency's representative) it was 
delivered. The employee must also document the other agency's agreement, to provide a 
timely warning. The FD-999 must be filed as specified above. 

(U//FOU0) Whenever time and circumstances permit, an employee's decision not to provide 
a warning in these circumstances must be approved by an ASAC or higher. In all cases, the 
reasons for not providing a warning must be documented by F.C or similar successor form in a 
zero file or if investigative methods are used, the appropriate investigative file. 


^(u//Ptwef 


b7E -2 
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14.7.3.1.2 (V) Warnings When Intended Victim is in Custody or is a 

Protectee 

(U//F OUO ) When an employee has information that a person described below is an intended 
victim, tiie employee, in consultation with his or her supervisor, must expeditiously notify the 
law enforcement agency that has protective or custodial jurisdiction of the threatened person. 

(U/ /FQUQ) This section applies when the intended victim is: 

A) (U/TPOU©-) a public official who, because of his/her official position, is provided a protective 
detail; 

B) qj//P£ya)i I b7E -2 


G) (U/ /FOUO) detained or incarcerated. 

(U//PtM44JL) This paragraph does not apply to employees serving on the security detail of the 
FBI Director or any other FBI protected persons when the threat is to the individual they 
protect. 

14.7.3.1.2.1 (U) Means, Manner, and Documentation of 
Warning/Notification 

(U/ / F OUO) The employee, in consultation with his or her supervisor, may determine the 
means and manner of the notification. When providing notification, the employee shall 
provide as much information as possible regarding the threat and the credibility of the 
threat. The employee must document on an FD-999 what he or she informed the other 
law enforcement agency, and when, where, how (e.g., telephone call, email) and to whom 
the notice was delivered. The FD-999 must be placed in a zero file or if investigative 
methods are used, the appropriate investigative file. 

14.7.3.2 (U) Notification to Law Enforcement Agencies That Have 

Investigative Jurisdiction 

14.7.3.2.1 ( U) Expeditious Notification 

14.7.3.2.1.1 (U) Threats to Intended Persons 

(U//F QU Q) Except as provided in Section# 144-3.2.2, when an employee has 
information that a person (other than a pdgg&j&scribcd above in Section 14.7.3.1.2) who 
is identified or can be identified through reasonable means is subject to a credible threat 
to his/her life or of serious bodily injury, the employee must attempt expeditiously to 
notify other law enforcement agencies that have investigative jurisdiction concerning the 
threat. 

14.73.2.1.2 (U) Threats to Occupied Structures or Conveyances 

(U//FOUO) When an employee has information that a structure or conveyance which can 
be identified through reasonable means is the subject of a credible threat which could 
cause a loss of life or serious bodily injury to its occupants. employee, in consultation 
with his or her supervisor, must provide expeditious notifica©f)$ te- other law enforcement 
agencies that have jurisdiction concerning the threat. 
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1 A.132.2 (V) Exceptions to Notification 

(U/ /FOUO) An employee need not attempt to notify another law enforcement agency that has 
investigative jurisdiction concerning a threat: 

A)flJ//retf9l I b7E -2 


B) (U// FOUQ) when the other law enforcement agency knows the nature and extent of the 
specific threat to the intended victim. 

(UZ/ FOUQ) Whenever time and circumstances permit, an employee's decision not to provide 
notification to another law enforcement agency in the foregoing circumstances must be 
approved by an ASAC or higher. In all cases, the reasons for an employee's decision not to 
provide notification must be documented in writing in a zero file or if investigative methods 
are used, the appropriate investigative f Ms. 

14.7.3.2.3 Means, MaVmkk, Am Documentation of Notification 

(U// FQUO) The employee may determine the means and manner of the notification. The 
employee must document in writing in the applicable investigative file the content of the 
notification, and when, where, and to whom it was delivered. 

14.7.4 ( U//F OUO) DissEM&$$jpN of Inform a tion Concerning Threats, 
Possible ViolenceW&^monstrations Against Foreign 
Establishments or Officials in the United States 

(U/Z FOU O) If information is received indicating a threat to life within the scope of Section 14.7, 
or possible violence or demonstrations against foreign establishments or officials in the United 
Stales, the field office case agent must immediately coordinate the matter with the FBI HQ SSA 
responsible for the case, who must notify the Department of State (DOS), United States Secret 
Service (USSS). and any other Government agencies that may have an interest. See Section IV 
of the .1973 MOU between the FBI and USSS. for the FBI’s infonnaeoia J&aring responsibilities 
with the USSS in such eases. 

14.7.5 (V) Dissemina tion of Informa tion Concerning Threa ts against 
the President and Other Designa ted Officials 

(U// FOUQ4 The United States Secret Service (USSS) has statutory authority to protect, or to 
engage in certain activities to protect the President and certain other persons as specified in 18 
U.S.C. § 3056. An MOU between the FBI and USSS specifies the FBI information that the 
USSS wants to receive in connection with its protective responsibilities. 

(U// FOUQ ) Detailed guidelines regarding threats against the President of the United States and 
other USSS protectees can be fou 
Kidnapping and Assault” (See th 


f I in "Presidential and Presidential Staff 
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